CVE-2026-50656
Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine in Microsoft Defender publicly referred to as "RoguePlanet ".
CVSS score7.8 / 10
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HWeakness type (CWE)CWE-59
Vendorsmicrosoft
Affected products
| Vendors | Product | Versions |
|---|---|---|
| microsoft | malware protection engine | - |
Related articles
FalconFlank: PoC Released for Privilege Escalation in CrowdStrike Falcon
FalconFlank PoC targets CrowdStrike Falcon Sensor privilege escalation via Office macro remediation on Windows 11 25H2 and Server 2025. No CVE yet.
ShieldBreak, the New Zero-Day Exploit That Elevates Windows Users to SYSTEM
ShieldBreak is a zero-day exploit that abuses Microsoft Defender for local privilege escalation to SYSTEM on Windows 11 and Server 2025, with technical analysis and defense tips.
ShieldBreak: PoC Bypasses Microsoft Defender Patch and Targets SYSTEM Privileges
ShieldBreak PoC bypasses MS Defender patch for CVE-2026-50656, granting SYSTEM access. Tested on Win11 25H2 & Server 2025. Update systems promptly.
This product uses the NVD API but is not endorsed or certified by the NVD.